CVE-2024-3198

The WP Font Awesome Share Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpfaisocial' shortcode in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-3198 WP Font Awesome Share Icons <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The WP Font Awesome Share Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpfaisocial' shortcode in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-3198

CVE-2024-3198 affects the WordPress plugin WP Font Awesome Share Icons . The vulnerability is a Stored Cross-Site Scripting flaw in the plugin’s shortcodes (notably the wpfai_social shortcode) across versions up to 1.1.1 due to insufficient input sanitization and output escaping. It requires auth...

WordPress WP Font Awesome Share Icons Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Font Awesome Share Icons Type Plugin Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3198 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8224cc2ac039 Credits Lucio Sá...